A museum, a gallery, or another cultural institution can put a photograph a door can match on a staff badge, on a volunteer card, and on a contractor or vendor pass, when it keeps those three files apart. Name the file before anyone uploads, use the camera that file allows, and store an end date on every card the building prints. Form I-9, a DBS certificate, an SIA photocard, and a visa or passport photograph stay on the path that issues them.
Direct hires follow the HR badge guide. Agency educators and temporary visitor-services staff follow the staffing guide. Contract security follows the security guide. A gallery build follows the construction guide. A symposium the building hosts follows the conference guide. A visa for a courier who travels with a loan follows the immigration guide. Starting from $0.20 per photo.
What does one shared photograph cost a museum or gallery?
The cost shows up at a staff door. A docent is turned away because last season's card has no end date, and a school group waits. An installer holds a dark selfie from the dock, and the crate sits on the truck. One crop for the badge, the volunteer card, and a courier visa puts three end dates on one file.
The U.S. Bureau of Labor Statistics counted 182.6 thousand seasonally adjusted employees in museums, historical sites, and similar institutions (NAICS 712) in September 2026, a preliminary figure. That count is paid employees. It does not include volunteers, and a commercial gallery that sells work rather than preserving and exhibiting it sits outside the count. The same page lists 2025 employment of 6,700 curators and 5,980 museum technicians and conservators.
| File | Who holds the camera | What goes wrong if you substitute |
|---|---|---|
| Staff badge | A link before the first shift, or the security office. | A volunteer card used as employment ID, or a weekday badge treated as all-access on opening night. |
| Volunteer card | The volunteer office's template, before the first gallery shift of the season. | A staff badge left active after a docent leaves, or a gift-shop shift filed as volunteering. |
| Contractor or vendor pass | That work order's template, before the dock time or the install. | The vendor's company badge used as your access, or a pass with no end date. |
| Form I-9, for people the institution employs in the United States | The employee chooses the documents. A museum card is not on the Lists of Acceptable Documents. | Filing the card as a List A or List B document, or specifying which document to bring. |
| DBS certificate, SIA photocard, passport, or visa | That issuer's own capture. A U.S. visa follows the Department of State. A UK passport photograph meets GOV.UK photo rules. | Sending the museum crop to DBS, the SIA, or the embassy. The issuer still decides. |
The Form I-9 instructions define an employee as a person paid wages or other remuneration, and they give unpaid volunteers as people outside that term. The Handbook for Employers counts food and lodging as remuneration. Section 2 is due within three business days, or on day one when the job is shorter. Do not complete the form for a contractor's employee. On an E-Verify case, compare the photo E-Verify displays with the document presented.
Which rule decides this photograph?
No single national portrait size covers a museum or gallery credential. The photograph matches a face to a record. It does not open a gallery, a store, or a dock, and it does not replace a background check.
CISA's Public Venue Credentialing Guide (July 2026) is written for public venues, and its procedures are options, not a regulation. A museum opening or a ticketed exhibition is the kind of gathering it describes. It suggests a photo so a credential is tied to one person, a validity window, a colour unlike the previous season, and a ban on posting the image. Employee credentials should include a photo. A background check matched to the role comes before the card. A year-round badge may be invalid on event day. A contractor pass names the work order, the time, and the area, and it is collected or printed to expire. The guide does not set a crop. Measure the window you print. A driver at the dock shows a government photo ID. A driver who goes past the dock is escorted on a temporary pass. A researcher gets a dated visitor credential, not a staff badge.
In the United States, Fact Sheet #14A allows people to volunteer freely, without pay, for a charitable or similar nonprofit. They generally may not volunteer in a commercial activity the nonprofit runs, and the fact sheet names a gift shop. Paid employees cannot volunteer the same type of services they are employed to provide. Department of Labor guidance says employees may not volunteer services to a for-profit private employer. A commercial gallery's floor staff get the staff badge, not a volunteer card.
In the United Kingdom, GOV.UK says a volunteer agreement does not form a contract of employment. A right to work check is what an employer does before employing someone, and the volunteer card is not that check. A DBS check is only for eligible roles, paid or volunteer. Standard and Enhanced checks that meet the DBS volunteer definition are free of the DBS fee. DBS does not check the right to work, and the certificate is not the card. An SIA licence is a separate photocard. Contracted manned guarding needs one. In-house staff usually do not, except door supervision at licensed premises while alcohol is served or regulated entertainment, such as a film screening, is being provided. Your card does not replace the photocard.
How do museums and galleries collect these photos today?
A building that has not split the files still runs on a shared inbox and a printer at the staff door. The volunteer office emails a season of selfies the week the docents return. An art handler who finished in April can still open a door in October. A portrait from the public website gets copied onto the badge.
What does a split workflow look like?
Name the file before the first link goes out. Every file stores an end date.
1. Write down who holds the camera. Collect the staff photo before the first shift, the volunteer photo before the season's first gallery shift, and the contractor photo before the dock time. Keep a retake camera at the security office. An AI headshot stays on a public page, with its own permission, not on the credential.
2. Sort people by the record that already owns them. Mark whether a staff badge is valid on opening night. A nonprofit docent gets a volunteer card through the season. Paid work, including the gift shop, stays on the staff badge, and a for-profit gallery does not issue a volunteer card for floor staff. An installer, a caterer, or a lending courier gets a pass through the work order. Their employer keeps Form I-9.
3. Collect the file on one link, or at the security office. The badge photo service can email one link per person, with no extra account, expired after use, available per request from support@idphoto.ai. Direct hires use the employee badge page. The link does not replace a background check, Form I-9, a DBS check, or an SIA licence.
4. Reject a bad capture in the same visit. One person, in colour, in focus, eyes visible. Hats and sunglasses come off. Background removal and photo enhancement apply only when the template allows them. A visa or UK passport photograph stays unedited. See when a corrected portrait fits.
5. Write the file back with its date. The institution still decides who may enter. On a replacement, face comparison checks the new capture against the stored file. Liveness detection is available per request. Take the copy back, or use a temporary link of 2 hours to 14 days. Deactivate the card on its date.
6. Batch one class on one template. Batch preparation returns a retake list before the print deadline. Keep one new docent class, one install company, and one opening's caterers in separate batches. Change the colour or the layout from the previous season, so last year's card is obvious at the door.
Many printers take ID-1 stock, 85.60 mm by 53.98 mm under ISO/IEC 7810. Measure the window before the first link.
What should a museum or gallery require from a vendor?
| What you need | What good looks like |
|---|---|
| A specification per picture | Size, crop, and background for each window. See the published specifications. A licence and a visa sit outside this list. |
| A block on forbidden edits | A visa photograph, and a U.S. or UK passport photograph, stay unedited. |
| Rejection in the same visit | Face, light, blur, and framing while the person is still there. |
| A path before the first shift | One link per person, no extra account, expired after use. Keep a camera at the security office for a retake. |
| The record that owns the person | The file returns with its end date. Workday or SAP SuccessFactors sync is available per request for direct employees. |
| A check a door can explain | Face comparison and liveness detection are available per request. The person at the door still matches the face. A clean check is not an entry decision. |
How do you roll this out at one building?
Write the file rule before the first link. Name the templates, the windows, the end dates, and which cards open the galleries, the shop, and the dock.
Run one week on those templates only. Use two staff badges with an end date, one volunteer card that ends with the season, and one contractor pass that ends when the crew leaves. Print one card, or confirm print and mailing before you promise a card in the post. Print and mailing is available per request. Do not start on an opening night.
Add the next building after a write has held. Prove a clean upload, a retake, a walk-up, and one failed write that is retried. Open Workday or SAP SuccessFactors only for direct employees, after support confirms the connection.
Where do these photos usually fail?
| What fails | What to change |
|---|---|
| One selfie is used for the badge, the volunteer card, and a courier visa | Split the files. A public page needs its own permission. |
| A gift-shop shift is on a volunteer card, or a for-profit gallery issued one | Move paid work to the staff badge. A commercial gallery does not use a volunteer card for floor staff. |
| A pass still opens a door after the season or the install | Deactivate it on the stored date and cross-check what was not returned. |
| A lost badge is reprinted from a new phone selfie | Reprint from the stored file. Retake only when face comparison fails. |
| A vendor roster has no usable photo | Send the link before the dock time. The vendor's badge is not your credential. |
| Last season's colour is printed again, or the photo is posted online | Change the design from the previous season. Keep the credential image off social media. |
Who may see a photograph?
The person, the volunteer office, a supervisor, and the door may see the file they need. A visitor sees the card, not the personnel file. Do not post the credential photograph. GDPR Article 5(1)(e) and the CCPA apply where those laws apply. The data privacy policy covers encrypted transmission, a temporary link of 2 hours to 14 days, or taking the image back. US and EU processing are available. Other regions are available per request.
What do operations leads ask?
Does every staff member, volunteer, and contractor need a photo on the credential?
The rule you operate under decides. The July 2026 guide is options for public venues, not a regulation. It suggests a photo on a credential and does not set a crop size.
Can a volunteer card also be the staff badge?
Keep them separate. A staff badge ends with employment. A volunteer card ends with the season. A gift-shop shift is paid work. See Fact Sheet #14A.
Can a for-profit gallery use a volunteer card for floor staff?
No. Under the FLSA, employees may not volunteer services to a for-profit private employer. Floor staff are employees. They get the staff badge, and Form I-9 stays on its own file.
Can an install crew or a caterer send one set of photos for the whole company?
Each person needs their own file. The vendor keeps Form I-9. You print the pass you issue, with that work order's end date. A lending courier is not your employee.
Can a new docent or a contractor send a photo before the first shift?
Yes. One link, no extra account, expired after use, available per request from support@idphoto.ai. Keep a retake camera at the security office. Form I-9 keeps its own clock for people you employ.
What if the person is a contract guard, or the building serves alcohol or shows films?
Print your pass with the end date. The security company keeps Form I-9. Contracted manned guarding in the UK needs an SIA licence. In-house staff usually do not, except door supervision at licensed premises. See the security guide.
When should the photograph be deleted?
Delete the file on the date stored with it, and deactivate the card then. Collect a temporary pass or print it to expire. GDPR Article 5(1)(e) keeps personal data in the UK and the EU no longer than necessary.
What does preparing the photograph cost?
It starts at $0.20 per photo. That is separate from a printer lease, a background check, and a government fee. The catalog covers 300+ specifications across 200+ countries.
How does idphoto.ai fit this workflow?
The idphoto.ai API is the photo step. It prepares a portrait to the template you name, checks the capture, and returns a file for the staff record, the volunteer record, the vendor record, or the printer. The institution decides who receives a card and which door it opens. Form I-9, a DBS certificate, an SIA licence, and a visa stay on their own path. A UK passport photograph must meet GOV.UK photo rules. A UK passport photo code retrieves a photograph that meets those rules, and HM Passport Office still decides. Preparing a photo starts at $0.20, from a catalog of 300+ specifications across 200+ countries.
Templates, the self-service link, Workday or SAP SuccessFactors sync, print and mailing, liveness detection, a face-mask check, another processing region, and the Shopify store template with one-click setup are each available per request. The store stays off the access record. Email support@idphoto.ai with the card designs, which passes are valid on an opening night, the end dates, and how the file returns.